Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: nrSq+1fWxnKonpTsLbd3IKU7w7rnEe6ByxkwY5Jq9h0=
Subject key identifier: 56:D3:9B:F7:A6:FC:C6:E0:44:A5:D6:0F:E7:84:BA:5D:D9:67:78:46
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 01A0D1244313F20D589C943855723B6F5EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 148E
Signing time: Thu 24 Sep 2026 02:00:09 +0000
Manifest this update: Thu 24 Sep 2026 02:00:09 +0000
Manifest next update: Fri 25 Sep 2026 02:00:09 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: LvfU9gtQwQSiLsT/7f3voazgA2EuT0u8gqWWm9vamZ0=)
3: aqxIqajmYQ1_CMiZ7_GwMKxbii8.asa (hash: DHOAQoYQMdjCMW3lkrZBHQJ7lJDnJKHVKvRbqH3Nq5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:43:13:f2:0d:58:9c:94:38:55:72:3b:6f:5e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Sep 24 02:00:09 2026 GMT
Not After : Sep 25 02:00:09 2026 GMT
Subject: CN=56d39bf7a6fcc6e044a5d60fe784ba5dd9677846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:40:99:e7:b0:0a:f1:4f:cd:48:d9:fe:73:
d3:66:b7:a9:12:12:b7:79:f3:0a:1e:45:b3:46:c7:
05:1b:da:b3:aa:88:fd:f1:a7:22:57:cb:55:d4:51:
47:7c:80:d9:26:d1:5f:0b:df:a8:9d:fb:86:f7:5e:
c4:1e:64:1f:74:ce:d2:8f:db:0f:f7:67:b9:dc:14:
8a:9e:80:5f:71:cc:bc:5b:a7:e1:ad:ca:72:a4:6a:
ab:4c:c7:e7:18:e8:b0:ce:27:84:cc:6f:bd:58:8e:
90:9c:6c:4d:86:55:12:97:29:e7:b4:e8:de:1b:e2:
cd:23:b2:04:ac:ab:b7:86:2c:f4:14:9a:b6:56:70:
2f:23:1e:6a:d8:27:e3:88:6c:09:56:d4:5f:d6:aa:
3f:6f:e5:12:de:10:95:ef:1d:1b:58:fd:b4:37:d0:
a6:2c:9c:11:0f:93:00:d4:8f:57:7c:56:ed:f5:4f:
7e:43:e0:f4:64:a0:62:6f:ee:22:f5:bc:17:3d:e5:
5c:88:7e:99:a4:2e:21:5e:4a:e6:e7:3a:ab:f7:a9:
fb:1c:e0:4e:09:cb:20:32:e0:5d:27:a4:41:5c:8c:
c3:a4:7c:89:29:fa:c9:e3:e8:46:bc:24:88:c6:7a:
ee:21:45:38:b1:23:2b:4c:be:f2:14:41:b2:57:76:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D3:9B:F7:A6:FC:C6:E0:44:A5:D6:0F:E7:84:BA:5D:D9:67:78:46
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:54:40:86:86:b4:4d:b5:0f:4e:8f:89:10:73:79:5c:7d:4f:
97:6f:e6:f7:10:de:56:27:7e:f3:09:ab:9b:3c:d1:10:cc:79:
c5:c9:5f:f8:e4:f2:8b:77:d5:60:1c:93:dc:dc:ab:4c:13:44:
1d:84:a4:ef:43:31:e8:17:5e:9c:7a:48:86:36:f3:64:1e:86:
db:6f:7c:87:c3:d5:52:a7:59:3f:15:97:34:72:e4:d2:c7:32:
0c:df:77:a5:b4:42:37:5e:0e:03:1f:e2:07:a1:84:9a:21:93:
09:4a:0a:5c:95:e0:cf:c2:e7:2e:88:c5:5c:84:0d:05:88:f0:
7a:14:46:e5:5d:ae:f6:b6:e0:4a:dc:7c:16:f7:d4:81:86:9b:
bf:a6:c0:bf:da:2b:ed:72:3f:68:d7:44:6c:94:33:32:d0:41:
2c:f7:4b:24:a9:38:a3:08:8e:8c:ac:0e:0e:eb:20:94:55:d2:
28:a2:6a:f4:70:eb:3f:5b:8d:28:39:72:81:bb:54:c9:58:36:
49:f0:4b:89:7f:1c:19:dc:ba:c9:3b:d5:33:93:49:a1:e8:24:
7a:a7:a7:02:b1:14:06:2f:a9:37:26:ac:43:20:87:f0:48:91:
b0:d6:17:57:fb:7c:d5:a1:e8:96:10:1b:20:df:48:ef:55:f1:
80:76:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:50:04 2026 by rpki-client